$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: q22u/InzdmazlUgewGYkbzhtKzmH5BofqG945kLZJwQ= Subject key identifier: FF:C5:3A:3A:92:A8:AD:41:E8:3D:11:71:4C:E8:1E:90:18:63:41:80 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: DF Signing time: Sun 15 Jun 2025 04:40:08 +0000 Manifest this update: Sun 15 Jun 2025 04:40:08 +0000 Manifest next update: Sun 22 Jun 2025 04:40:08 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: nC2DKNfTXdH8PkLfbbPk0zKDaygJB/YTgm0GfzlAYMs=) 2: F220949E1C3411EFAF8F6A5BC4F9AE02.roa (hash: JIXgdhiXTjZ6ev4WQoNqMVmd92t9GAOhewZo29LoRAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Jun 15 04:40:08 2025 GMT Not After : Jun 22 04:40:08 2025 GMT Subject: CN=684e4ea8-e9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:93:67:fc:86:14:98:20:95:31:5d:48:2d: ef:3c:6e:f7:d9:ef:31:ad:c2:26:3e:b9:c4:0d:db: 1b:6b:03:d9:1f:bc:93:94:d1:74:db:9d:5e:4d:27: c0:fd:b5:a2:67:d1:4a:3d:dc:c1:ae:17:c7:56:0c: 4b:eb:e9:b9:a7:76:80:41:46:b1:e0:61:f0:34:74: 49:f8:4c:91:fc:2c:07:ea:6a:86:f4:72:3f:39:16: 30:8e:9b:40:29:fa:be:2f:4e:64:2e:89:c1:69:d5: d5:7a:7c:d3:47:8a:73:3a:05:7f:bc:23:35:4d:01: c4:3f:1b:d5:5f:29:fd:93:6d:3c:70:b0:21:b4:10: e1:11:8e:05:15:31:0a:86:49:68:4b:fd:ee:76:07: 42:a1:72:31:43:0a:22:66:2e:0e:f6:44:08:34:39: b1:f8:7a:87:d1:5d:95:31:4c:da:bb:b2:07:17:0f: b2:f1:f0:0f:c6:f9:01:28:9d:06:46:65:89:34:28: 0e:eb:95:4c:e8:aa:7b:ed:65:f2:d4:f9:fb:66:42: b3:61:84:3d:f2:7e:77:8f:22:5b:a4:20:a5:9e:35: 26:6f:fb:91:21:59:10:db:2a:de:f3:e0:8e:7c:ff: ee:84:a3:81:29:3d:7a:60:23:fd:9b:31:49:45:43: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C5:3A:3A:92:A8:AD:41:E8:3D:11:71:4C:E8:1E:90:18:63:41:80 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:10:41:0c:20:71:22:6d:94:d5:7c:74:e7:9b:43:1e:3a:1e: b2:2f:06:9d:97:04:3c:23:bb:9d:1e:0c:f1:e5:bd:6e:61:29: 40:b4:d0:e3:0c:86:d7:6d:c8:ad:56:a1:85:5e:57:1b:01:41: 7a:e7:6d:15:69:35:ab:58:67:49:f6:09:e8:8b:7d:23:73:40: dc:21:df:b8:60:57:e5:63:5e:c4:b7:f9:a9:6c:87:0e:89:af: 38:ff:72:ce:16:4e:65:7a:d0:ac:f1:ad:01:91:dd:73:1c:3b: cc:44:b9:32:7a:7e:de:ee:2b:fa:79:02:d7:44:5d:12:85:9b: fa:de:3c:fd:2f:3a:60:d6:a7:cb:e4:d3:aa:cd:b7:d6:8c:70: f3:2a:4f:53:05:9f:46:3f:c7:22:cb:b7:db:67:ee:dc:bc:e7: ae:90:b4:50:cc:66:cb:b6:7f:3d:b6:94:41:e1:23:66:20:21: e2:30:f6:b2:2c:09:02:7c:cf:a1:e9:b0:92:7f:01:17:c5:06: fd:c5:e2:64:2d:e4:d3:e1:49:98:5e:b9:0d:e4:df:b0:4d:0c: c2:bd:37:3b:29:0c:41:34:44:ab:92:1b:1d:fb:af:36:e6:0d: 17:bb:33:9a:bf:94:3b:a2:ba:76:06:1c:de:f5:f0:5c:8b:ed: 3a:4a:b2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUwNjE1MDQ0MDA4WhcNMjUwNjIyMDQ0MDA4WjAYMRYwFAYD VQQDEw02ODRlNGVhOC1lOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFqTZ/yGFJgglTFdSC3vPG732e8xrcImPrnEDdsbawPZH7yTlNF0251eTSfA /bWiZ9FKPdzBrhfHVgxL6+m5p3aAQUax4GHwNHRJ+EyR/CwH6mqG9HI/ORYwjptA Kfq+L05kLonBadXVenzTR4pzOgV/vCM1TQHEPxvVXyn9k208cLAhtBDhEY4FFTEK hkloS/3udgdCoXIxQwoiZi4O9kQINDmx+HqH0V2VMUzau7IHFw+y8fAPxvkBKJ0G RmWJNCgO65VM6Kp77WXy1Pn7ZkKzYYQ98n53jyJbpCClnjUmb/uRIVkQ2yre8+CO fP/uhKOBKT16YCP9mzFJRUOGdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/FOjqS qK1B6D0RcUzoHpAYY0GAMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWEEEMIHEibZTVfHTnm0MeOh6yLwadlwQ8I7udHgzx5b1uYSlAtNDj DIbXbcitVqGFXlcbAUF6520VaTWrWGdJ9gnoi30jc0DcId+4YFflY17Et/mpbIcO ia84/3LOFk5letCs8a0Bkd1zHDvMRLkyen7e7iv6eQLXRF0ShZv63jz9Lzpg1qfL 5NOqzbfWjHDzKk9TBZ9GP8ciy7fbZ+7cvOeukLRQzGbLtn89tpRB4SNmICHiMPay LAkCfM+h6bCSfwEXxQb9xeJkLeTT4UmYXrkN5N+wTQzCvTc7KQxBNESrkhsd+682 5g0XuzOav5Q7orp2Bhze9fBci+06SrKm -----END CERTIFICATE-----Generated at Sun Jun 15 19:29:51 2025 by rpki-client